Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06d7a1bc-9573-3bef-9bdf-7a6cc4d3b41c.roa
File: 06d7a1bc-9573-3bef-9bdf-7a6cc4d3b41c.roa (raw, json)
Hash identifier: 5ceLwoPkRZVzmnIelRAggKx+z8Wx9AfwaGZnMAIHT5o=
Subject key identifier: 0A:1F:B8:AE:8F:7D:6D:F9:FD:D7:B8:02:F3:98:07:AE:EB:A8:17:1C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848962A878938EC94661A72D000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06d7a1bc-9573-3bef-9bdf-7a6cc4d3b41c.roa
Signing time: Sat 18 Jan 2025 15:03:50 +0000
ROA not before: Sat 18 Jan 2025 15:03:50 +0000
ROA not after: Fri 18 Apr 2025 14:03:50 +0000
asID: 834
IP address blocks: 108.165.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:2a:87:89:38:ec:94:66:1a:72:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 18 15:03:50 2025 GMT
Not After : Apr 18 14:03:50 2025 GMT
Subject: CN=4a8427d1-e344-4eed-8411-bc3add6ec86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:b6:94:13:00:d0:a9:15:a1:75:6a:41:d2:
75:c2:07:43:b4:e1:6b:a5:4e:83:09:76:be:ad:24:
3e:6c:ad:ba:9c:9f:7a:52:c1:03:a9:39:96:0d:b7:
6c:23:da:49:4a:50:83:0c:e6:da:4d:59:f6:b4:05:
2f:06:0d:51:9f:3b:24:4a:c1:81:33:0e:0d:2d:c0:
ee:b4:25:10:48:e5:97:ad:88:c0:a1:83:b2:97:44:
3e:1c:7a:c2:b9:a2:69:8a:c0:88:c2:83:3d:11:45:
69:86:25:5e:01:b5:44:27:a3:75:60:6a:cc:a9:0c:
4e:17:6a:f6:92:c1:56:c1:82:07:d3:51:83:4f:5b:
c1:9a:45:25:e1:2f:dd:02:79:22:fb:6c:68:53:9b:
88:76:a7:ac:02:39:5a:31:68:2e:c2:96:91:af:47:
d9:0b:85:84:e9:38:e4:52:f9:e0:28:fe:39:98:fc:
66:57:79:94:e4:19:70:06:73:7e:2d:88:32:fe:da:
01:bc:b4:d4:22:82:ca:01:47:e8:a6:f7:a9:94:b0:
6f:5a:73:a4:be:94:9c:9a:aa:65:00:a6:fd:7b:2a:
1d:80:ee:4b:77:ce:5b:bd:67:47:6d:49:12:ad:21:
5b:49:ec:d4:14:10:f5:57:9b:69:88:89:b2:55:5d:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:B8:AE:8F:7D:6D:F9:FD:D7:B8:02:F3:98:07:AE:EB:A8:17:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06d7a1bc-9573-3bef-9bdf-7a6cc4d3b41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ab:d2:e8:03:ef:47:a8:98:10:89:d5:aa:d8:14:4d:5f:dd:
1d:cd:c3:80:f3:80:7a:a1:be:59:26:bc:05:54:4f:71:40:1a:
98:04:41:f4:8e:f0:48:01:fe:d7:3d:d3:f8:2d:33:8d:6c:6d:
2a:00:12:1f:67:17:ab:b2:f8:6c:16:33:4b:d6:5d:0e:ba:6a:
97:03:e4:6e:c5:46:b4:8b:2e:c9:77:89:92:20:33:ab:0c:e6:
80:80:cc:07:1b:c3:6a:a9:88:7d:5f:65:f3:aa:ee:12:db:e1:
8f:c9:2a:04:1f:d3:93:89:5c:b0:ac:38:76:c1:50:f7:ce:34:
cc:7c:af:aa:06:87:d9:b3:41:82:d4:b1:fb:0c:75:9a:5a:12:
7b:d1:e4:ab:de:06:cb:9e:0a:8b:c3:99:0b:93:a7:8b:bd:7f:
ad:fc:d6:35:cc:9e:43:fc:0d:49:e2:f8:eb:cf:0d:36:4a:ef:
1b:1e:a0:c3:c0:b0:47:15:00:7a:eb:f3:6d:5c:85:22:0a:de:
1a:47:c0:58:02:7e:d8:43:6d:12:7b:6a:21:03:e6:6c:77:0f:
60:25:4c:48:aa:91:f1:70:cc:a7:70:5c:a0:f6:c1:35:a8:40:
96:11:9c:fb:ae:8d:f6:63:3d:92:b9:85:f8:6c:52:6c:11:f7:
ca:01:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:28 2025 by rpki-client